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CLAIMS 

1 . A method for preventing exploiting an email message, comprising: 

decomposing said email message to its components; 

for each of said components, correcting the structural form of said 

component to comply with rules thereof, if the structural form of 

said component deviates from said rules; and 

recomposing said email message from components thereof. 

2. A method according to claim 1, wherein said rules relate to common 
structure of an email message, 

3. A method according to claim 1, wherein at least one of said rules 
. relates to detecting malformed structure of said email message. 

4. A method according to claim 1, wherein at least one of said rules 
relates to detecting exploits within said email message. 

5. A method according to claim 1, wherein said structural form is selected 
from the group comprising: structure, format, and content. 

6. A method according to claim 1, wherein said correcting comprises 
omitting components that violate said rules from said recomposing. 

7. A method according to claim 1, further comprising detecting hostile 
content within at least one of said components. 

8. A method according to claim 3, wherein said malformed structure of an 
email message is selected from the group including: invalid structure of 
a component, invalid content of a component, contradicting 
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information, malformed attachment, proprietary encoding type, and 
file-type masquerading. 

9. A system for preventing exploiting an email message, said system 
implemented at a hosting platform, said system comprising: 

a module for identifying components of an email message; 

a module for testing a compliance of the structural form of said 

email message with rules thereof; 

a module for correcting the structural form of said email 
message; and 

a module for recomposing said email message fi:om components 
thereof. 

10. A system according to claim 9, wherein said rules relate to common 
structure of an email message, 

1 1. A system according to claim 9, wherein at least one of said rules relates 
to detecting malformed structure of said email message. 

12. A system according to claim 9, wherein at least one of said rules relates 
to detecting exploits within said email message. 

13. A system according to claim 9, wherein said structural form is selected 
from the group consisting of: structure, format, and content. 

14. A system according to claim 9, further comprising a module for 
detecting hostile content within said components. 



